[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Crédit Mutuel Arkéa FAQ, Nov 4); Paris prosecutor cybercrime probe per AFP via 01net; provider unnamed; final loss not disclosed

Crédit Mutuel Arkéa says attackers came in through a service provider's platform and used the bank's own account; it calls the $133M figure the right order of magnitude

  • Entry point: a third-party provider's platform (unnamed), not Fortuneo.
  • Money path: transfers from the bank's own account to other banks, then to crypto platforms; on-chain tracing earlier showed swaps to ETH and Monero.
  • For banks and fintechs: inventory which providers can initiate or approve payments from treasury or nostro accounts, require out-of-band confirmation for large outbound transfers to new counterparties, and test how fast you can freeze outbound rails.

See our Nov 4 item for the original disclosure.

Sources: Crédit Mutuel Arkéa: Informations complémentaires suite à l'attaque (Nov 4, French) · 01net: un prestataire piraté, enquête du parquet de Paris (French) · SecurityAffairs: attackers exploit third-party provider to raid Crédit Mutuel Arkéa (Nov 8)